Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          69deqrJxzMQF0VRTux/c2dxLDXqng/oHkME9R0GhYgw=
Subject key identifier:   E6:75:59:F7:32:2B:7A:E6:9D:75:6D:D1:80:87:CC:57:30:CC:25:CE
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       18ACF4FB45AA0E6AF67883980F42BCDB017335DA
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:20:13 +0000
ROA not before:           Thu 20 Jul 2023 14:15:13 +0000
ROA not after:            Thu 18 Jul 2024 14:20:13 +0000
asID:                     52706
IP address blocks:        2804:c70:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ac:f4:fb:45:aa:0e:6a:f6:78:83:98:0f:42:bc:db:01:73:35:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:15:13 2023 GMT
            Not After : Jul 18 14:20:13 2024 GMT
        Subject: CN=E67559F7322B7AE69D756DD18087CC5730CC25CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:cb:1c:1c:fc:b5:5d:61:15:0e:a2:4c:ba:
                    37:d3:95:6d:11:b6:db:fa:9a:6b:31:9b:9e:3e:0b:
                    0b:84:29:5d:ce:79:5f:e4:8c:ca:cb:65:30:38:06:
                    91:0c:4d:26:76:96:8f:cb:85:68:e4:a6:07:f5:a2:
                    42:af:19:cb:46:dc:f8:08:42:d5:f9:d6:b2:d2:df:
                    42:1d:de:3b:bc:01:60:71:b7:f2:72:ed:5e:e0:c6:
                    57:a4:17:f5:58:12:4e:fc:a8:eb:8b:10:87:59:1a:
                    10:f9:9c:1e:bc:54:43:b0:92:36:8e:6f:d4:26:1f:
                    41:03:ae:b2:c6:2f:88:70:bd:83:8f:b7:33:21:ee:
                    3c:98:b3:0f:2a:f0:21:2e:fb:42:94:93:ed:b3:28:
                    99:56:1c:2f:72:55:fc:53:91:9c:44:8e:78:ac:7a:
                    be:87:b7:84:cd:dd:00:10:3c:3d:31:28:af:1a:f0:
                    e3:95:ce:6d:ab:44:c3:1e:ae:a3:5f:a9:b1:6c:a3:
                    c9:e4:79:d9:e3:43:73:9f:08:7b:19:da:74:ca:0c:
                    45:e1:46:18:3e:7a:6f:61:bb:75:d7:20:d5:ec:f0:
                    d7:13:6b:02:2b:4b:1b:3c:d2:8b:c0:1f:6d:97:07:
                    ed:47:b0:cb:45:f9:77:ac:cf:41:13:c2:83:cb:eb:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:59:F7:32:2B:7A:E6:9D:75:6D:D1:80:87:CC:57:30:CC:25:CE
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:df:84:1e:17:e4:b3:4d:c5:d2:80:d3:b5:11:aa:b4:16:
         78:93:5e:93:5c:79:e3:7a:88:86:e2:d6:6c:3c:b6:e0:9e:48:
         e3:7f:96:d7:23:26:ec:80:d8:e5:2b:06:49:3a:3c:d0:59:89:
         7f:34:0d:13:b0:25:6d:c2:f3:0e:cb:98:4f:10:fd:e3:9c:66:
         3a:d4:7d:38:ac:e6:7e:78:fc:8b:63:1b:f3:09:77:00:06:5b:
         c0:43:a5:79:4f:b2:df:ad:15:ba:d5:c9:6b:2e:8a:b8:5c:89:
         c5:0b:47:39:7e:7d:01:39:2b:f7:83:c4:0d:94:f1:19:39:a2:
         d0:ee:0e:4c:02:15:db:c8:eb:a7:40:1b:35:a0:c3:dc:c6:16:
         aa:12:89:a0:45:4c:7a:e3:0b:5d:ef:1c:1c:f1:b8:55:c2:b4:
         b2:e6:74:d5:b6:9e:d5:08:00:7d:98:2d:38:15:0b:31:a4:cd:
         57:d3:80:3a:35:11:70:c6:3d:db:8d:98:7a:1a:bb:c6:1e:ce:
         37:7e:79:14:dc:6c:52:c3:31:ce:8c:dc:0c:ba:31:41:f4:4d:
         52:9e:b4:2e:91:48:af:f1:10:27:3b:6f:88:87:95:aa:2b:86:
         aa:34:6e:72:33:46:4e:a6:21:f0:8b:d4:8b:e5:bd:8a:cd:ac:
         57:34:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org